CVE-2013-1906

Published: Jun 24, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Rules module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with the "administer rules" permission to inject arbitrary web script or HTML via a rule tag.

Affected (8)

Products: Wolfgang Ziegler: Rules

Wolfgang Ziegler

1 product

Rules

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wolfgang Ziegler Rules	Version 7.x-2.0-beta1
Wolfgang Ziegler Rules	Version 7.x-2.0-beta2
Wolfgang Ziegler Rules	Version 7.x-2.0-beta3
Wolfgang Ziegler Rules	Version 7.x-2.0-rc1
Wolfgang Ziegler Rules	Version 7.x-2.0-rc2
Wolfgang Ziegler Rules	Version 7.x-2.0
Wolfgang Ziegler Rules	Version 7.x-2.1
Wolfgang Ziegler Rules	Version 7.x-2.2